From 6ba6fa5a8b6b23b6a1f4a7fbdff4e7999d5f478e Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Wed, 3 Mar 2021 09:14:49 +0100
Subject: Add CVE-2021-3420/newlib

---
 data/CVE/2021.list | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/data/CVE/2021.list b/data/CVE/2021.list
index 0e7b6d80ca..3d54f1052c 100644
--- a/data/CVE/2021.list
+++ b/data/CVE/2021.list
@@ -1,5 +1,8 @@
 CVE-2021-3420
 	RESERVED
+	- newlib <unfixed>
+	NOTE: https://sourceware.org/git/?p=newlib-cygwin.git;a=commit;h=aa106b29a6a8a1b0df9e334704292cbc32f2d44e
+	TODO: check libnewlib-nano, picolibc potentially derived code, if not then the CVE does not apply
 CVE-2021-27917
 	RESERVED
 CVE-2021-27916
-- 
cgit v1.2.3